Update dependency @slack/web-api to v6 by mend-for-github-com[bot] · Pull Request #8 · nexmo-community/guys-bot

mend-for-github-com · 2025-10-14T02:36:17Z

This PR contains the following updates:

Package	Type	Update	Change
@slack/web-api (source)	dependencies	major	`^5.8.0` → `^6.0.0`

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity	CVSS Score	Vulnerability
High	8.7	CVE-2025-7783
High	8.0	CVE-2022-0155
High	7.5	CVE-2021-3749
High	7.5	CVE-2025-27152
High	7.3	CVE-2023-26159
Medium	6.5	CVE-2023-45857
Medium	6.5	CVE-2024-28849
Medium	5.9	CVE-2020-28168
Low	2.6	CVE-2022-0536

Release Notes

slackapi/node-slack-sdk (@slack/web-api)

`v6.9.1`

Compare Source

What's Changed

chore: update axios in web-api to 1.6.0. See #1682 for more info by @enza252 in #1686

Full Changelog: https://github.com/slackapi/node-slack-sdk/compare/@slack/web-api@6.9.0...@slack/web-api@6.9.1

`v6.9.0`

Compare Source

What's Changed

Fix bug with files.uploadV2 to ensure complete file is uploaded by @srajiang in #1616
Add cursor pagination to team.accessLogs by @seratch in #1625
Mark stars.* API methods as deprecated by @seratch in #1632
chore: fix imports order by @levenleven in #1639
feat: add context to rate-limited event by @levenleven in #1637
Upgrade dependency to @slack/types by @ClementValot in #1559

New Contributors

@levenleven made their first contribution in #1639
@ClementValot made their first contribution in #1559

Full Changelog: https://github.com/slackapi/node-slack-sdk/compare/@slack/web-api@6.8.1...@slack/web-api@6.9.0

`v6.8.1`

Compare Source

What's Changed

Add include_categories to emoji.list API arguments by @seratch in #1581
feat: set default max concurrency to 100 for by @callumsteele4 in #1583 (fixes #1582)
Use Readable instead of ReadStream in uploadV2 by @redneb in #1577 (fixes #1586)
Add admin.conversations.bulk{Archive|Delete|Move} API method support by @seratch in #1566
fix auth.revoke argument type definition (test should be optional) by @Cattttttttt in #1562

New Contributors

@callumsteele4 made their first contribution in #1583
@redneb made their first contribution in #1577

`v6.8.0`

Compare Source

What's Changed

Added in functionality for admin.analytics.getFile method by @hello-ashleyintech in #1515
avoid creating unnecessary function by @jimmywarting in #1524
Add include_all_metadata to conversations.replies API arguments by @seratch in #1537
Add files.uploadv2 support (fixing #1541) by @srajiang in #1544
fix(1528): better warnings about webclient fallbacks by @edwmurph in #1529
ChatUnfurlArguments require either channel and ts or unfurl_id and source properties to be specified in pairs by @filmaj in #1551

New Contributors

@jimmywarting made their first contribution in #1524
@edwmurph made their first contribution in #1529

Full Changelog: https://github.com/slackapi/node-slack-sdk/compare/@slack/web-api@6.7.2...@slack/web-api@6.8.0

`v6.7.2`

Compare Source

Add domain to team.info API parameters (via #1457) - thanks @seratch
Fix #1490 Add missing properties to UsersInfoResponse (via #1491) - thanks @seratch @AdriannaBeck
#1476 Tweaking logic for warning when using conversation APIs that are missing accessibility parameters (via #1479) - thanks @filmaj @saveman71

See the full list of issues/pull requests of this release here.

`v6.7.1`

Compare Source

Add missing parameters in chat.update API method (via #1433) - thanks @seratch!
Upgrade the minimum axios version to the latest (web-api) (via #1447 ) - thanks @seratch!
Fix #1452 fields[key].label is missing in users.profile.get responses (via #1453 ) - thanks @seratch @75asa!
Auto code generation added Huddles / clip related properties to response types - thanks @seratch!

See the full list of issues/pull requests of this release here.

`v6.7.0`

Compare Source

Add accessibility_label to button type block element (via #1419) - thanks @seratch!
Add admin.users.unsupportedVersions.export API support (via #1420) - thanks @seratch!
Generate Web API response types including bookmarks.* (via #1423) - thanks @seratch!
Include Retry-After raw response header value when throwing an error due to invalid Retry-After header (via #1426) - thanks @filmaj!
Add bookmarks.* API methods (via #1427) - thanks @srajiang!

See the full list of issues/pull requests of this release here.

`v6.6.0`

Compare Source

Upgrade axios to 0.25 to address security vulnerabilities (via #1416) - thanks @seratch!
Add support for the admin.apps.requests.cancel API method (via #1413) - thanks @seratch!
Add the files and related properties and their types in conversations.replies API responses (via #1405 and #1403) - thanks @seratch!
Fix #1397: some fields in conversations.list API responses were missing their types (via #1398) - thanks @seratch!
Add the focus_on_load property to the views.* API responses (via #1386) - thanks @seratch!
Tweaking the User-Agent field when communicating with Slack APIs in the deno runtime (via #1384) - thanks @filmaj!

See the full list of issues/pull requests of this release here.

`v6.5.1`

Compare Source

`v6.5.0`

Compare Source

#1365 Add team.* APIs for rtm.start migration - Thanks @seratch!
#1371 Add admin.users.session.resetBulk API support - Thanks @seratch!
#1336 Fix #1326 Add admin.conversations.{get|set|remove}CustomRetention API - Thanks @seratch!
#1373 Remove invalid arguments from oauth.v2.exchange API method - Thanks @seratch!
#1351 Add pronouns to user.profile response data - Thanks @seratch!
#1341 #1348 #1362 Add new properties to web-api responses - Thanks @seratch!
#1337 #1132 web-api token should be passed in header instead of body param - Thanks @filmaj!
#1334 Upgrade axios once nock issue is resolved - Thanks @filmaj!
#1321 Fix #1302 Invalid JSON string causing "Cannot create property 'response_metadata' on string" error - Thanks @seratch @wizar!
#1374 Disable typescript-eslint/no-explicit-any in internal code of web-api - Thanks @seratch!
#1324 #1320 Fix #1318 Add notice comments to auto-generated source files - Thanks @seratch!

See the full list of issues/pull requests of this release here.

`v6.4.0`

Compare Source

Added Sign in With Slack (OpenID Connect) support (#1296, #1307) - Thanks @seratch
Add Slack Connect APIs response types and tests (#1284, #1283, #1306) - Thanks, @srajiang and @seratch
Adding "private" property in shares in files API responses (#1294, #1303) - Thanks, @seratch and @JeanBarriere.
Added more info to rate limited error exception message (#1214, #1312) - Thanks @seratch
Updated admin.users.invite endpoint (#1297, #1298) - Thanks @stevengill!

`v6.3.0`

Compare Source

Add Slack Connect (conversations.*) and admin.auth.policy.* support (#1283, #1284) - Thanks, @srajiang!
Updated Web API response types (#1285) - Thanks, @seratch!
Added Node 16.x to the CI (#1249) - Thanks, @connorads!
Fixed the PinsAddArguments and PinsRemoveArguments interfaces (#1277) - Thanks, @rr-codes!
Added support for Axios timeout customization (#1264) - Thanks, @misscoded!

`v6.2.4`

Compare Source

#1236 Fix #1235 ViewsOpenResponse type is incorrect - Thanks @rr-codes!
#1242 Fix #1240 by enabling to pass integer as post_at in chat.scheduleMessage API calls - Thanks @Zummek!
#1252 #1254 Changed type of created on UsersConversationsResponse - Thanks @swaters-atlassian!
#1238 #1247 #1254 Update the web-api response types - Thanks @seratch!

See the full list of issues/pull requests of this release here.

`v6.2.3`

Compare Source

Enable accessing all response types from @slack/web-api (#1232) - Thanks @seratch!
Update Web API responses - Thanks @seratch!

See the full list of issues/pull requests of this release here.

`v6.2.2`

Compare Source

Fix invalid types introduced by #1209 (#1233) - Thanks @seratch!

See the full list of issues/pull requests of this release here.

`v6.2.1`

Compare Source

`v6.2.0`

Compare Source

Add API response types to web-api methods (#1188 #1203 #1215) - Thanks @seratch!
Add a few missing ones and types to WebClient arguments (#1209) - Thanks @seratch!
Fix #1192 Add admin.users.session.* API support (#1198) - Thanks @seratch!
Fix #1195 Make text arg optional in chat.* methods (#1197) - Thanks @seratch!
Make text optional in chat.postMessage arguments and add warn logging if it's missing (#1173) - Thanks @kentac55!
Pass logger through to WebClient and fix broken logLevel warning (#1206) - Thanks @sommd!
Fix required parameters in chat.update method (#1063) - Thanks @dginovker!
Warn logging if thread_ts is not a string (#1223) - Thanks @hi1280!
Added exclusion logic for Electron based apps to prevent changing User-Agent header (#1220) - Thanks @5tarlxrd!
Resolve inconsistent package dependencies across slack packages (#1208) - Thanks @seratch!
Add integration tests with real Slack servers (#1200) - Thanks @seratch!
Add a unit test verifying #1037 is no longer an issue (#1204) - Thanks @seratch

See the full list of issues/pull requests of this release here.

`v6.1.0`

Compare Source

Add new user_auth_blocks property to chat.unfurl (#1174) - Thanks @pichsenmeister!

`v6.0.0`

Compare Source

Updated minimum Nodejs version to 12.13.0, updated minimum TypeScript version to 4.1 (#1146, #1147) - thanks @stevengill
Added apps.connections.open method (#1096) - thanks @stevengill

`v5.15.0`

Compare Source

Updated axios dependency to fix security issue (#1142) - Thanks @stevengill
Added auth.teams.list api method (#1137, #1139) - Thanks @stevengill, @daveagill
Added support for admin.barriers.* methods (#1126, #1127) - Thanks @misscoded
Migrated CI over to GitHub Actions (#1129) - Thanks @stevengill

`v5.14.0`

Compare Source

added support for org wide app installations. This includes adding team_id as an optional argument to various web-api methods and adding team_id as an optional parameter to WebClientOptions so it will be automatically passed along to any web-api calls being made. (#1046) - Thanks @stevengill
Update ViewsUpdateArguments to accommodate external_id and view_id (#1002, #1116) - thanks @misscoded
Added admin.users.session.list method (#1111) - thanks @stevengill

`v5.13.0`

Compare Source

Added the following API method:

(#1093, #1098, #1099) - thanks @stevengill, @cjdenio & @mwbrooks

`v5.12.0`

Compare Source

Adds new Web API methods as part of the Workflow Steps from Apps functionality (#1094) - thanks @misscoded. NOTE: This feature is currently in open beta, and some details may change between now and when the beta is complete.

`v5.11.0`

Compare Source

Added new web-api methods (#1047, #1049, #1045 ) - Thanks, @kian2attari + @clavin!
Deprecated admin.conversations.whitelist.* methods (#1048, #1050) - Thanks, @kian2attari!
Change paginate return type to AsyncIterable (#1040, #779) - Thanks, @clavin!
Add error to Methods superclass (#1036, #1042) - Thanks, @clavin!
Move method bindings from WebClient.ts to methods.ts (#1036) - Thanks, @clavin!

`v5.10.0`

Compare Source

Added calls API support (#1021, #1026) - Thanks @stevengill

`v5.9.0`

Compare Source

Add admin.usergroups.* APIs for Grid org admins (#1015) - Thanks @seratch

`v5.8.1`

Compare Source

Added package prefix to logger name (#995, #999) - thanks @stevengill, @seratch
Added warnings for deprecated methods (#992) - thanks @stevengill

If you want to rebase/retry this PR, check this box

mend-for-github-com · 2025-10-14T02:36:19Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

Update dependency @slack/web-api to v6

d6507e1

mend-for-github-com bot added the security fix Security fix generated by Mend label Oct 14, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update dependency @slack/web-api to v6#8

Update dependency @slack/web-api to v6#8
mend-for-github-com[bot] wants to merge 1 commit intomasterfrom
whitesource-remediate/slack-web-api-6.x

mend-for-github-com bot commented Oct 14, 2025 •

edited

Loading

Uh oh!

mend-for-github-com bot commented Oct 14, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

mend-for-github-com bot commented Oct 14, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

Uh oh!

mend-for-github-com bot commented Oct 14, 2025

⚠️ Artifact update problem

File name: package-lock.json

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

mend-for-github-com bot commented Oct 14, 2025 •

edited

Loading